Re: [PR] Added support for JDBC 4.3 beginRequest and endRequest methods. [tomcat]

2025-03-12 Thread via GitHub
fmeheust commented on PR #677: URL: https://github.com/apache/tomcat/pull/677#issuecomment-2718315476 Hi @aooohan and @ahai-code this contribution has been approved for a while, is it possible to have an idea on when it will be comitted? Thank you! -- This is an automated message from th

Re: [PR] Ensure partial put data range not exceed ContentRange declared [tomcat]

2025-03-05 Thread via GitHub
rmaucher commented on PR #810: URL: https://github.com/apache/tomcat/pull/810#issuecomment-2700562654 Made changes to try it. Thanks. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific

Re: [PR] Ensure partial put data range not exceed ContentRange declared [tomcat]

2025-03-05 Thread via GitHub
rmaucher closed pull request #810: Ensure partial put data range not exceed ContentRange declared URL: https://github.com/apache/tomcat/pull/810 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the s

Re: [PR] Refactor CORS Request Type Checking Logic for Simplicity and Clarity [tomcat]

2025-02-13 Thread via GitHub
dsoumis commented on PR #826: URL: https://github.com/apache/tomcat/pull/826#issuecomment-2657902498 The revised code, though less nested, adheres to the CORS flow as specified. In my opinion, this structure offers a more maintainable and understandable implementation. Also the ordering

Re: [PR] Refactor CORS Request Type Checking Logic for Simplicity and Clarity [tomcat]

2025-02-13 Thread via GitHub
koust6u commented on PR #826: URL: https://github.com/apache/tomcat/pull/826#issuecomment-2657908424 @n828cl Which part do you find harder to follow? If you could clarify, it would help me understand better. I also believe that calling `isSameOrigin()` before `isValidOrigin()`

Re: [PR] Refactor CORS Request Type Checking Logic for Simplicity and Clarity [tomcat]

2025-02-13 Thread via GitHub
n828cl commented on PR #826: URL: https://github.com/apache/tomcat/pull/826#issuecomment-2657751803 If this were to be merged, the CORS flowchart should be updated accordingly. See ![](https://tomcat.apache.org/tomcat-11.0-doc/images/cors-flowchart.png) -- This is an automated mes

Re: [PR] Refactor CORS Request Type Checking Logic for Simplicity and Clarity [tomcat]

2025-02-13 Thread via GitHub
n828cl commented on PR #826: URL: https://github.com/apache/tomcat/pull/826#issuecomment-2657748693 I'm not sure that the revised code properly implements the spec. (Unfortunately, the current spec is much harder to follow than the previous iteration.) Also, calling IsSameOrigin() before is

Re: [PR] Refactor CORS Request Type Checking Logic for Simplicity and Clarity [tomcat]

2025-02-13 Thread via GitHub
dsoumis merged PR #826: URL: https://github.com/apache/tomcat/pull/826 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org

Re: [PR] Refactor CORS Request Type Checking Logic for Simplicity and Clarity [tomcat]

2025-02-14 Thread via GitHub
dsoumis commented on PR #826: URL: https://github.com/apache/tomcat/pull/826#issuecomment-2658927616 Indeed Mark, that's a fair point. I've refactored the order as suggested in: [commit](https://github.com/apache/tomcat/commit/e451872) . -- This is an automated message from the Apache Git

Re: [PR] Refactor CORS Request Type Checking Logic for Simplicity and Clarity [tomcat]

2025-02-14 Thread via GitHub
markt-asf commented on PR #826: URL: https://github.com/apache/tomcat/pull/826#issuecomment-2658848926 I echo n828cl's concerns about calling `isSameOrigin()` before `isValidOrigin()`. I can't see an obvious issue but swapping the order of those two checks is going to be a lot faster than d

Re: [PR] Replace wine by makensis for Linux and use finalization to sign (un)installer [tomcat]

2025-02-17 Thread via GitHub
markt-asf commented on PR #825: URL: https://github.com/apache/tomcat/pull/825#issuecomment-2662781242 This is now working perfectly. Thanks to @rainerjung for all the effort put into this. Being able to build Tomcat releases on MacOS without having to install Wine means I can now easily re

Re: [PR] Replace wine by makensis for Linux and use finalization to sign (un)installer [tomcat]

2025-02-17 Thread via GitHub
markt-asf closed pull request #825: Replace wine by makensis for Linux and use finalization to sign (un)installer URL: https://github.com/apache/tomcat/pull/825 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL abov

Re: [PR] Add unit tests for AsyncStateMachine's asyncPostProcess method [tomcat]

2025-02-16 Thread via GitHub
dsoumis commented on PR #828: URL: https://github.com/apache/tomcat/pull/828#issuecomment-2661457556 1) Please ensure that you run ant validate or use Checkstyle tool with the checkstyle rules provided before submitting a PR. There are currently some checkstyle errors in your import stateme

Re: [PR] Prevention of Util Class Institution [tomcat]

2025-02-14 Thread via GitHub
koust6u closed pull request #824: Prevention of Util Class Institution URL: https://github.com/apache/tomcat/pull/824 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubsc

Re: [PR] BZ69446 - add parameter maxPutFileSize in DefaultServlet [tomcat]

2025-02-19 Thread via GitHub
Chenjp commented on PR #823: URL: https://github.com/apache/tomcat/pull/823#issuecomment-2670515402 @rmaucher @markt-asf I have to talk here since previous vul report has been rejected. I really think the target issue of this PR is a perfect match of CWE-770 / CWE-400. ***```The product all

Re: [PR] Simplify usage of custom ssl configuration [tomcat]

2025-02-20 Thread via GitHub
Hakky54 commented on PR #805: URL: https://github.com/apache/tomcat/pull/805#issuecomment-2671109381 Hi @markt-asf any thoughts regarding this pr? Would love to get your opinion/feedback as we have worked together on the other pr in the past -- This is an automated message from the Apache

Re: [PR] BZ69446 - add parameter maxPutFileSize in DefaultServlet [tomcat]

2025-02-19 Thread via GitHub
rmaucher commented on PR #823: URL: https://github.com/apache/tomcat/pull/823#issuecomment-2670663780 We answered this quite a few times already, so let's leave it at that. Write enabled allows editing webapp contents, which is reserved to administrators. -- This is an automated message f

Re: [PR] BZ69446 - add parameter maxPutFileSize in DefaultServlet [tomcat]

2025-02-19 Thread via GitHub
rmaucher closed pull request #823: BZ69446 - add parameter maxPutFileSize in DefaultServlet URL: https://github.com/apache/tomcat/pull/823 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specifi

Re: [PR] BZ69446 - add parameter maxPutFileSize in DefaultServlet [tomcat]

2025-02-19 Thread via GitHub
Chenjp commented on PR #823: URL: https://github.com/apache/tomcat/pull/823#issuecomment-2670712406 Ok, final decision ups to you. Write is reserved to administrators... If share this standard, would to know your opinion on RCE [CVE-2017-12617](http://cve.mitre.org/cgi-bin/cvename.c

Re: [PR] BZ69446 - add parameter maxPutFileSize in DefaultServlet [tomcat]

2025-02-20 Thread via GitHub
Chenjp commented on PR #823: URL: https://github.com/apache/tomcat/pull/823#issuecomment-2673452793 > > Rate limiter filter, or WAF can detect and block those requests. > > Either of those two can also provide the limits you are requesting, here. Adding a feature to Tomcat which requi

Re: [PR] Add unit tests for AsyncStateMachine's asyncPostProcess method [tomcat]

2025-02-25 Thread via GitHub
koust6u commented on PR #828: URL: https://github.com/apache/tomcat/pull/828#issuecomment-2681419698 Thank you for your valuable feedback and for providing the coverage report link. I appreciate your insights on improving test coverage. I'll review the uncovered code paths and work on addin

Re: [PR] Add unit tests for AsyncStateMachine's asyncPostProcess method [tomcat]

2025-02-24 Thread via GitHub
markt-asf commented on PR #828: URL: https://github.com/apache/tomcat/pull/828#issuecomment-2677681461 The code coverage of `AsyncStateMachine` is already fairly good. I'd prefer to see some tests using real requests that exercised the few code paths (excluding trace level logging and `Ille

Re: [PR] Add unit tests for AsyncStateMachine's asyncPostProcess method [tomcat]

2025-02-24 Thread via GitHub
rmaucher commented on PR #828: URL: https://github.com/apache/tomcat/pull/828#issuecomment-2677710733 BTW, the code coverage report is here: https://nightlies.apache.org/tomcat/tomcat-12.0.x/coverage/index.html#dn-a It can be generated using test.coverage=true property in build.properties

Re: [PR] BZ69504 move force recycle from log access method [tomcat]

2025-02-24 Thread via GitHub
markt-asf closed pull request #821: BZ69504 move force recycle from log access method URL: https://github.com/apache/tomcat/pull/821 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comm

Re: [PR] BZ69504 move force recycle from log access method [tomcat]

2025-02-24 Thread via GitHub
markt-asf commented on PR #821: URL: https://github.com/apache/tomcat/pull/821#issuecomment-2677711179 I share Rémy's concerns. I see multiple concerns being addressed in this PR. Correct recycling is critical to the correct operation of Tomcat and log still recycles the request/response

Re: [PR] log connectionId [tomcat]

2025-02-24 Thread via GitHub
markt-asf closed pull request #814: log connectionId URL: https://github.com/apache/tomcat/pull/814 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-

Re: [PR] log connectionId [tomcat]

2025-02-24 Thread via GitHub
markt-asf commented on PR #814: URL: https://github.com/apache/tomcat/pull/814#issuecomment-2678517529 Manually applied as there were a few things I needed to add/change - %{xxx}L is for ID attributes not connection attributes - new settings needed to be added to the docs - change lo

Re: [PR] log connectionId [tomcat]

2025-02-24 Thread via GitHub
Dmole commented on PR #814: URL: https://github.com/apache/tomcat/pull/814#issuecomment-2678622306 https://github.com/apache/tomcat/commit/3cfc9bc048109c5a566fc24539e5bb9759c114b6 https://github.com/apache/tomcat/commit/987f737afe4f08da939d870b5b1ec4b96010d926 -- This is an automa

[PR] Fix info-then-debug logging in Http2UpgradeHandler [tomcat]

2025-02-24 Thread via GitHub
bergander opened a new pull request, #830: URL: https://github.com/apache/tomcat/pull/830 Fix info-then-debug logging in `Http2UpgradeHandler` by making the `UserDataHelper` static. Otherwise the _lastInfoTime_ in `UserDataHelper` will be per HTTP2-connection, but it should be a global scop

Re: [PR] Fix info-then-debug logging in Http2UpgradeHandler [tomcat]

2025-02-24 Thread via GitHub
markt-asf commented on PR #830: URL: https://github.com/apache/tomcat/pull/830#issuecomment-2679115250 Tx. Well-spotted. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To

Re: [PR] Fix info-then-debug logging in Http2UpgradeHandler [tomcat]

2025-02-24 Thread via GitHub
markt-asf merged PR #830: URL: https://github.com/apache/tomcat/pull/830 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.o

Re: [PR] BZ69446 - add parameter maxPutFileSize in DefaultServlet [tomcat]

2025-02-20 Thread via GitHub
ChristopherSchultz commented on PR #823: URL: https://github.com/apache/tomcat/pull/823#issuecomment-2671713171 > > The feedback was that this serves no purpose. I believe it is correct. > > For processing of POST and some others like that, processing takes memory. Also we do not know wha

[PR] WebResource read/write lock key changed to in lowercase arbitrarily [tomcat]

2025-02-19 Thread via GitHub
Chenjp opened a new pull request, #829: URL: https://github.com/apache/tomcat/pull/829 Discarding the file name case sensitivity of resource directory. Detection of a directory case sensitivity is expansive, we have to create file with different upper/lower case name and check result.

Re: [PR] Enhance case sensitivity check [tomcat]

2025-02-19 Thread via GitHub
Chenjp commented on PR #820: URL: https://github.com/apache/tomcat/pull/820#issuecomment-2670122793 +1 Since create a case sensitivity verification file is not a good idea, then treats all as insensitive simply, remove the indicator. see PR #829. -- This is an automated message

Re: [PR] WebResource read/write lock key changed to in lowercase arbitrarily [tomcat]

2025-02-20 Thread via GitHub
Chenjp closed pull request #829: WebResource read/write lock key changed to in lowercase arbitrarily URL: https://github.com/apache/tomcat/pull/829 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to th

Re: [PR] prefer central repo, disable releases for asf-snapshots [tomcat-tck]

2025-03-31 Thread via GitHub
adoroszlai commented on PR #2: URL: https://github.com/apache/tomcat-tck/pull/2#issuecomment-2766744340 Thanks @markt-asf for merging this. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the spe

Re: [PR] Changed string comparison - need to use equals() instead of == or != [tomcat]

2025-03-31 Thread via GitHub
ChristopherSchultz commented on code in PR #834: URL: https://github.com/apache/tomcat/pull/834#discussion_r2020937294 ## java/org/apache/catalina/realm/DigestCredentialHandlerBase.java: ## @@ -288,7 +289,7 @@ protected String mutate(String inputCredentials, byte[] salt, int it

Re: [PR] prefer central repo, disable releases for asf-snapshots [tomcat-tck]

2025-03-31 Thread via GitHub
markt-asf merged PR #2: URL: https://github.com/apache/tomcat-tck/pull/2 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.o

Re: [PR] misc: fix spelling [tomcat]

2025-04-04 Thread via GitHub
markt-asf merged PR #840: URL: https://github.com/apache/tomcat/pull/840 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.o

[PR] Bump actions/checkout from 3 to 4 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
dependabot[bot] opened a new pull request, #69: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/69 Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. Release notes Sourced from https://github.com/actions/checkout/releases";>actions/checkout's

[PR] Bump actions/cache from 4.2.0 to 4.2.3 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
dependabot[bot] opened a new pull request, #70: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/70 Bumps [actions/cache](https://github.com/actions/cache) from 4.2.0 to 4.2.3. Release notes Sourced from https://github.com/actions/cache/releases";>actions/cache's rele

Re: [PR] Bump actions/checkout from 3 to 4 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
markt-asf merged PR #69: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/69 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr.

Re: [PR] Bump actions/setup-java from 3 to 4 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
markt-asf merged PR #71: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/71 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr.

[PR] Bump actions/setup-java from 3 to 4 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
dependabot[bot] opened a new pull request, #71: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/71 Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4. Release notes Sourced from https://github.com/actions/setup-java/releases";>actions/setup

[PR] Bump codecov/codecov-action from 3 to 5 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
dependabot[bot] opened a new pull request, #72: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/72 Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 5. Release notes Sourced from https://github.com/codecov/codecov-action/releases";>c

Re: [PR] Bump actions/cache from 4.2.0 to 4.2.3 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
markt-asf merged PR #70: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/70 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr.

Re: [PR] Bump org.apache:apache from 33 to 34 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
markt-asf merged PR #68: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/68 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr.

Re: [PR] Bump codecov/codecov-action from 3 to 5 [tomcat-jakartaee-migration]

2025-03-24 Thread via GitHub
markt-asf merged PR #72: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/72 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr.

[PR] Bump org.apache:apache from 33 to 34 [tomcat-jakartaee-migration]

2025-03-23 Thread via GitHub
dependabot[bot] opened a new pull request, #68: URL: https://github.com/apache/tomcat-jakartaee-migration/pull/68 Bumps [org.apache:apache](https://github.com/apache/maven-apache-parent) from 33 to 34. Release notes Sourced from https://github.com/apache/maven-apache-parent/release

Re: [PR] Expanding Parallel Deployment section of Tomcat Docs [tomcat]

2025-03-25 Thread via GitHub
markt-asf commented on PR #832: URL: https://github.com/apache/tomcat/pull/832#issuecomment-2752080674 I like the idea. I don't think we have a list of ServletContext attributes in a single place. The implementation needs a few tweaks to fit in with how we build the Tomcat docs. I'll re-wor

Re: [PR] Changed string comparison - need to use equals() instead of == or != [tomcat]

2025-03-29 Thread via GitHub
dk2k commented on code in PR #834: URL: https://github.com/apache/tomcat/pull/834#discussion_r2019811567 ## java/org/apache/catalina/realm/DigestCredentialHandlerBase.java: ## @@ -288,7 +289,7 @@ protected String mutate(String inputCredentials, byte[] salt, int iterations, in

Re: [PR] Changed string concatenations to chained calls of append() [tomcat]

2025-03-27 Thread via GitHub
rmaucher closed pull request #835: Changed string concatenations to chained calls of append() URL: https://github.com/apache/tomcat/pull/835 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the speci

Re: [PR] Changed string concatenations to chained calls of append() [tomcat]

2025-03-27 Thread via GitHub
rmaucher commented on PR #835: URL: https://github.com/apache/tomcat/pull/835#issuecomment-2757236637 Doing this should not be needed for constant strings (so the IDE does not complain about it). -- This is an automated message from the Apache Git Service. To respond to the message, pleas

[PR] Added missing useCanonCaches define [tomcat]

2025-04-02 Thread via GitHub
PaulLodge opened a new pull request, #841: URL: https://github.com/apache/tomcat/pull/841 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mai

Re: [PR] Added missing useCanonCaches define [tomcat]

2025-04-02 Thread via GitHub
rmaucher commented on PR #841: URL: https://github.com/apache/tomcat/pull/841#issuecomment-2773748095 Thanks ! Merged. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To un

Re: [PR] Added missing useCanonCaches define [tomcat]

2025-04-02 Thread via GitHub
rmaucher closed pull request #841: Added missing useCanonCaches define URL: https://github.com/apache/tomcat/pull/841 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubsc

[PR] Adding nonstandard support for c:set and c:remove [tomcat]

2025-04-04 Thread via GitHub
jengebr opened a new pull request, #842: URL: https://github.com/apache/tomcat/pull/842 Enables optimized, non-standard behavior for the most common JSP tags, when configured to do so. **Unit tests pending** **Off by default.** When activated, the code generation to call `

Re: [PR] improve log context in order to add thread name information. [tomcat]

2025-05-10 Thread via GitHub
felix-zhang-0818 commented on PR #849: URL: https://github.com/apache/tomcat/pull/849#issuecomment-2868827471 From source code level. if (isRequestThread(thread)) { log.warn(sm.getString("webappClassLoader.stackTraceRequestThread", getContextName(), threadName, get

Re: [PR] improve log context in order to add thread name information. [tomcat]

2025-05-10 Thread via GitHub
felix-zhang-0818 closed pull request #849: improve log context in order to add thread name information. URL: https://github.com/apache/tomcat/pull/849 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-12 Thread via GitHub
ChristopherSchultz commented on PR #852: URL: https://github.com/apache/tomcat/pull/852#issuecomment-2873354046 Taken care of by PR #851 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the speci

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-12 Thread via GitHub
ChristopherSchultz commented on PR #851: URL: https://github.com/apache/tomcat/pull/851#issuecomment-2873353861 Taken care of by PR #851 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the speci

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-12 Thread via GitHub
ChristopherSchultz closed pull request #852: improve log context to add thread name for webappClassLoader.stackTra… URL: https://github.com/apache/tomcat/pull/852 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL ab

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-12 Thread via GitHub
ChristopherSchultz commented on PR #853: URL: https://github.com/apache/tomcat/pull/853#issuecomment-2873354191 Taken care of by PR #851 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the speci

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-12 Thread via GitHub
ChristopherSchultz closed pull request #853: improve log context to add thread name for webappClassLoader.stackTra… URL: https://github.com/apache/tomcat/pull/853 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL ab

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-12 Thread via GitHub
ChristopherSchultz closed pull request #851: improve log context to add thread name for webappClassLoader.stackTra… URL: https://github.com/apache/tomcat/pull/851 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL ab

Re: [PR] Refactor: Use enum for parsingRequestLinePhase in Http11InputBuffer [tomcat]

2025-05-12 Thread via GitHub
n828cl closed pull request #854: Refactor: Use enum for parsingRequestLinePhase in Http11InputBuffer URL: https://github.com/apache/tomcat/pull/854 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to th

Re: [PR] Refactor: Use enum for parsingRequestLinePhase in Http11InputBuffer [tomcat]

2025-05-12 Thread via GitHub
n828cl commented on PR #854: URL: https://github.com/apache/tomcat/pull/854#issuecomment-2872651956 You can't seriously think that someone is going to even review, let alone merge, a PR with 3,271 files changed... Seems like a rebase is warranted first. -- This is an automated mess

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-12 Thread via GitHub
ChristopherSchultz merged PR #850: URL: https://github.com/apache/tomcat/pull/850 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@tomcat

[PR] Refactor: Use enum for parsingRequestLinePhase in Http11InputBuffer [tomcat]

2025-05-12 Thread via GitHub
devjohnpark opened a new pull request, #854: URL: https://github.com/apache/tomcat/pull/854 ## Refactor `parsingRequestLinePhase` in `Http11InputBuffer` to use `enum RequestLineParsePhase` * Changed the type of the `parsingRequestLinePhase` field from `int` to the `enum RequestLine

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-12 Thread via GitHub
markt-asf commented on PR #850: URL: https://github.com/apache/tomcat/pull/850#issuecomment-2875237568 There is a comment at the top of all of the non-English resource files that states: ``` # Do not edit this file directly. # To edit translations see: https://tomcat.apache.org/get

[PR] Refactor: Use enum for parsingRequestLinePhase in Http11InputBuffer [tomcat]

2025-05-13 Thread via GitHub
devjohnpark opened a new pull request, #855: URL: https://github.com/apache/tomcat/pull/855 ## Refactor `parsingRequestLinePhase` in `Http11InputBuffer` to use `enum RequestLineParsePhase` * Changed the type of the `parsingRequestLinePhase` field from `int` to the `enum RequestLine

Re: [PR] improve log context to add thread name for webappClassLoader.stackTra… [tomcat]

2025-05-13 Thread via GitHub
ChristopherSchultz commented on PR #850: URL: https://github.com/apache/tomcat/pull/850#issuecomment-2877047878 Oh, sorry @markt-asf I forgot about POEditor.com. I'll coordinate off-line about this. -- This is an automated message from the Apache Git Service. To respond to the message, pl

[PR] allow users to plug in a ProgressListener via some factory. [tomcat]

2025-05-13 Thread via GitHub
reiern70 opened a new pull request, #856: URL: https://github.com/apache/tomcat/pull/856 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail

[PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-17 Thread via GitHub
rmannibucau opened a new pull request, #857: URL: https://github.com/apache/tomcat/pull/857 Proposal to have a clean shutdown (follow up of the mail on the list). This only handles the case bindOnInit=false. -- This is an automated message from the Apache Git Service. To respond to

Re: [PR] [Bug 69693] - Improve readability and type safety by changing parsingRequestLinePhase to an enum in Http11InputBuffer [tomcat]

2025-05-20 Thread via GitHub
YongGoose commented on PR #855: URL: https://github.com/apache/tomcat/pull/855#issuecomment-2894390398 Personally, I think this PR is worth reviewing! Using enums is definitely easier to understand than using integers like `0` and `1`. -- This is an automated message from the Apache Gi

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
rmannibucau commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2894460535 @markt-asf hmm, think it is current status: tomcat does: > ServerSocketChannel.open() which ends in > ServerSocketChannelImpl(SelectorProvider sp) throw

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
markt-asf commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2893802873 Just downloading the iso to try and reproduce this. Any networking configured beyond the default using DHCP such as a VPN? -- This is an automated message from the Apache Git Service. To

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
rmannibucau commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2893807955 @markt-asf no vpn, just a plain default setup with this /etc/hosts: ``` 127.0.0.1 localhost local.dev 127.0.1.1 romain # The following lines are desirable for IPv6 capa

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
rmannibucau commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2893783262 Interesting, so adding `-Djava.net.preferIPv4Stack=true` i do not have the error anymore and indeed the error seems to come from the fact i'm using "localhost" so i enter into `localAddr

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
rmannibucau commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2893829754 @markt-asf any reason to not enforce family in org.apache.tomcat.util.net.NioEndpoint#initServerSocket based on addr ? updated the PR in that sense -- This is an automated message fro

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
markt-asf commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2893838723 May have unintended consequences for dual-stack systems. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL ab

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
markt-asf commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2893704284 Tx. That helps. The unlock is trying to use an IPv6 address to unlock the Acceptor which Tomcat doesn't appear to be listening on. I'll see if I can reproduce this but if I can't, I'll add

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-05-20 Thread via GitHub
rainerjung commented on PR #858: URL: https://github.com/apache/tomcat/pull/858#issuecomment-2895052975 Docs for Commons Daemon Procrun mention, that JvmOptions9 can use the same two separators, that JvmOptions can use. Namely ";" and "#". Currently we use ";" for JvmOptions and "#" for Jvm

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
markt-asf commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2895192922 I'm very reluctant to make changes until I understand the root cause of an issue - especially in an area such as networking where there can be subtle behaviour differences across platforms

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-05-20 Thread via GitHub
mhoffrog commented on PR #858: URL: https://github.com/apache/tomcat/pull/858#issuecomment-2895493402 > Docs for Commons Daemon Procrun mention, that JvmOptions9 can use the same two separators, that JvmOptions can use. Namely ";" and "#". Currently we use ";" for JvmOptions and "#" for Jvm

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-05-20 Thread via GitHub
michael-o commented on code in PR #858: URL: https://github.com/apache/tomcat/pull/858#discussion_r2099371131 ## bin/catalina.bat: ## @@ -243,7 +243,7 @@ if not "%LOGGING_MANAGER%" == "" goto noJuliManager set LOGGING_MANAGER=-Djava.util.logging.manager=org.apache.juli.ClassLo

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-20 Thread via GitHub
markt-asf commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2896763570 Thanks for the `ifconfig` output. Configuration seems very similar. I installed Docker in case that was a factor but that didn't help trigger the issue. I still can't recreate this issue.

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-05-21 Thread via GitHub
mhoffrog commented on code in PR #858: URL: https://github.com/apache/tomcat/pull/858#discussion_r2099684597 ## bin/catalina.bat: ## @@ -243,7 +243,7 @@ if not "%LOGGING_MANAGER%" == "" goto noJuliManager set LOGGING_MANAGER=-Djava.util.logging.manager=org.apache.juli.ClassLoa

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-05-21 Thread via GitHub
michael-o commented on code in PR #858: URL: https://github.com/apache/tomcat/pull/858#discussion_r2099821491 ## bin/catalina.bat: ## @@ -243,7 +243,7 @@ if not "%LOGGING_MANAGER%" == "" goto noJuliManager set LOGGING_MANAGER=-Djava.util.logging.manager=org.apache.juli.ClassLo

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-05-21 Thread via GitHub
mhoffrog commented on code in PR #858: URL: https://github.com/apache/tomcat/pull/858#discussion_r2099778013 ## bin/catalina.bat: ## @@ -243,7 +243,7 @@ if not "%LOGGING_MANAGER%" == "" goto noJuliManager set LOGGING_MANAGER=-Djava.util.logging.manager=org.apache.juli.ClassLoa

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-21 Thread via GitHub
rmannibucau commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2897398231 > Apart from exceptional circumstances, Tomcat does not attempt to work around bugs in other components or OS configuration issues. This is a design decision to avoid bloat. well

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-21 Thread via GitHub
rmannibucau commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2896993852 @markt-asf you nailed it, after way deeper investigation I realized ipv6 was bound but only ipv4 (all) were working. It led me to checking some conf os. gai.conf was plain default so not

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-05-21 Thread via GitHub
michael-o commented on code in PR #858: URL: https://github.com/apache/tomcat/pull/858#discussion_r2099737527 ## bin/catalina.bat: ## @@ -243,7 +243,7 @@ if not "%LOGGING_MANAGER%" == "" goto noJuliManager set LOGGING_MANAGER=-Djava.util.logging.manager=org.apache.juli.ClassLo

Re: [PR] [fix] service.bat JvmOptions9 - FollowUp on Improve CVE-2024-56337 protection [tomcat]

2025-05-21 Thread via GitHub
mhoffrog commented on code in PR #858: URL: https://github.com/apache/tomcat/pull/858#discussion_r2099932516 ## bin/catalina.bat: ## @@ -243,7 +243,7 @@ if not "%LOGGING_MANAGER%" == "" goto noJuliManager set LOGGING_MANAGER=-Djava.util.logging.manager=org.apache.juli.ClassLoa

Re: [PR] [fix] ensure that when acceptor is stopped it doesn't log an error for nothing [tomcat]

2025-05-19 Thread via GitHub
markt-asf commented on PR #857: URL: https://github.com/apache/tomcat/pull/857#issuecomment-2889918221 This appears to be addressing a symptom (various error messages) rather than the cause (no local address available to unlock the `Acceptor`). We should be looking at the root cause. What c

Re: [PR] allow users to plug in a ProgressListener via some factory. [tomcat]

2025-05-19 Thread via GitHub
reiern70 commented on PR #856: URL: https://github.com/apache/tomcat/pull/856#issuecomment-2890201043 @ChristopherSchultz any chances to get this PR merged into Tomcat 11? - Any other work to be done from my side? - Add tests? - Back-port this to previous tomcat versions?

Re: [PR] allow users to plug in a ProgressListener via some factory. [tomcat]

2025-05-19 Thread via GitHub
rmaucher commented on PR #856: URL: https://github.com/apache/tomcat/pull/856#issuecomment-2890245052 Personally I am not a fan at all right now: - About the way it is hooked in Request and esp ApplicationContext. - It changes fileupload, which is a separate component (fileupload would

Re: [PR] allow users to plug in a ProgressListener via some factory. [tomcat]

2025-05-19 Thread via GitHub
markt-asf commented on PR #856: URL: https://github.com/apache/tomcat/pull/856#issuecomment-2890250497 See https://github.com/jakartaee/servlet/issues/66 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to

Re: [PR] allow users to plug in a ProgressListener via some factory. [tomcat]

2025-05-19 Thread via GitHub
rmaucher commented on PR #856: URL: https://github.com/apache/tomcat/pull/856#issuecomment-2890282071 Let's see how the feature proposal progresses first then. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL ab

Re: [PR] allow users to plug in a ProgressListener via some factory. [tomcat]

2025-05-19 Thread via GitHub
reiern70 commented on PR #856: URL: https://github.com/apache/tomcat/pull/856#issuecomment-2890315507 > Personally I am not a fan at all right now: > Ok. > * About the way it is hooked in Request and esp ApplicationContext. I'm totally new to Tomcat code-base. I tried to

<    14   15   16   17   18   19   20   21   >